MESSAGE CHAINING TRANSMISSION PROCESS AND SYSTEM FOR 

DATA BASES. 



Introduction 

The present invention concerns a process and system of database updating, and in 
particular during the transmission of a chain of messages. 

Background of the Invention 

In a system comprising a management centre and a plurality of subscribers over a 
wide territory, the sending by telephone or hertz route of updating information of 
the for the database of these subscribers is known. These messages are addressed, 
either to all subscribers, or to one subscriber in particular, that is to say that it 
contains a subscriber module address. 

These messages are for the administration of the system and are themselves 
superposed to the useful data such as video, audio or data. One understands that 
the place used by these messages is limited. Another limitation applies to the length 
of the message which is limited by the fact that the useful data cannot be interrupted 
only b ut-for a short moment. One understands that, in the example of an audio/video 
transmission, the emission channel cannot be interrupted only b yMor a short 
moment so that no visual impact will be perceptible. 

This is why, for transmission of a large amount of data, it h a s b ee nw as necessary to 
divide them in a large number of messages. 

These messages are sent in sequence on the network, in a logic order, that is to say 
one after the other, separated by a short interval, for example one second. 

As certain systems of this type do not use return channel towards the managing 
centre, as for example a modem, it is difficult for the managing centre to know if the 
data sent d a ta has is arrived correctly. In this way, it is obliged to repeat these 
messages periodically so as to statistically ensure that each message bas-is_arrived 
at destination. 
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A subscriber module includes schematically a num e r i ca l digital receiver either audio, 
or video or data receiver , and possibly te -see-a combination of these three types, a 
decoder able to s e par a t e e xtract the management messages, these latter being 
directed towards a security module comprising the subscriber database. This security 
5 module can be directly installed in the subscriber module or, for security and cost 
reasons, it can be as a detachable module such as an i nt e l li g e nt smart card or 
microchip card. 

The messages arriving tgat the security module are processed by the command 
interprete r contro l data r o ad o r . It is possible that the messages do not arrive in the 

10 e miss i on broadcasting order because of interferences in the transmission or simply 
as the subscriber's unit was not e ngag e d switched on at the moment of the sending 
of previous messages. It is necessary to specify that prior to each processing, each 
message is first decrypted and controlled for its authenticity. A message which does 
not satisfy the control criteria is rejected. In this hypoth e sis case . the security module 

15 will receive for example the sigtt -third message ^-before the first and second siw 
messages 1 and 2 . The execution of the third s i gn message 3 without the 
prerequisite execution of two previous messages can lead to blocking of the 
database or to generate an c e rtain error. 

A first solution consists in memorising all messages constituting a chain and, when it 
20 is complete, to proc ee d go on to its processing. This solution has the drawback to 
e stablish set the length of the maximum chain according to the memory available. 

The memory capacity of detachable i ntell i g e nt smart cards is limited, which obliges 
the card to process each message when thev arrive at e ach arr i va l. 

Brief Summary of the Invention 

25 The problem that the present invention proposes to solve, is to suppress on the 
subscriber's database the disastrous effects due to the execution of messages in an 
order different to that initially foreseen. 

This aim is fully reached by a transmission process of a chain of subscriber's 
database management messages, this a -process consisting te-of associatinge a 
30 conditional block which determines if the message is to be processed without 
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reference to all or part of others element of the chain and o f the conditions bound to 
the previous processing of all or part of other elements of the chain. 

In fact, due to this new conditional block included in each message elements of a 
chain, it is possible to determine if this message can be processed separately or 
5 must satisfy the conditions of processing of the messages supposed con s id e r e d to 
be received previouslv fifst. It is obvious that this test allows also to d e t e rm i n ethe 
determination if the current message in-evaluation has already been processed. 

To reach this aim, the security module disposes of a memory organized under the 
form of table indicating, for each chain x which are part of the messages member of 
10 this chain that have already been processed. having b ee n mad e obj e ct of a 
proc e ssing . After processing of all the-elements of the chain, the table of this chain is 
maintained in order to avoid that the resending r e turning of the same chain restarts 
its execution. It can be deleted on request of-bv the management centre or after a 
predefined time. 

15 The conditional block contained in the message does not contain only a simple 
indication binding the processing of the current message i n progr e ss to condition of 
having carried out the execution of previous messages, but also covers tbe-more 
complex functions, such as conditions related to o n-each element of the message 
chain. For example, it is possible to subm i t define the processing of element 4 of the 

20 chain on the condition that both -either elements 1 or 2 afe-is_processed and that 
element 3 is c a t e gor i cally imperatively processed. We will thus have the function: 

F(4) = (1 or 2) and 3. 

We take the example of the arrival to the security module of the-a_message member 
ele m e nt of family 5, this message being the element 4 of this family. The first 

25 operation will be to determine if its processing is subm i tt e d subject to other 
conditions. If this is not the case, it can be processed immediately. It should be noted 
that to chain messages does not mean that the processing must be made in the 
index order of the chain. One can imagine the case where one loads a sign i ficant 
bulky software, and for this reason, one divides it to transmit it in a chain of 

30 messages. Each of these messages contains a charg i ng loading address and the 
corresponding data. This is why an element of the chain can be processed in a 
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indifferent order. On the other hand, the last element of the chain setting up starting 
this new software will contain a condition stating that all the-elements of the chain 
must have been carried out in order that this one -software can be executed eamed 
out for its part . When this condition has been satisfied, the table correspondent to 
5 this family indicates that all messages have been carried out. 

According to a variant of the invention, the conditional block is divided in two parts, 
the one called "operation" to describe the type of logic function and the other called 
" int e r e sted related element" to describe on which other elements the operation must 
apply. The size -format of the part "i nt e rested related element" corresponds to the 
10 formats ize used in the table stored in the database designating the state of 
processing the elements of the chain. In this way, the logic comparison is greatly 
facilitated. 

According to other embodiments, the conditional block refers not to all the other 
elements of the chain, but to some only. It would be for example possible tg_referrin§ 
15 to three previous elements and not to all the elements. This allows to roduco the 
reduction of the length of the conditional block and takes into account the fact that an 
interference rarely exceeds the time of three messages. According to another 
example, one could define a chain structure where only the last element contains a 
conditional block. 

20 This structure allows, unlike the solutions of the prior art, to reject only a minimum of 
messages. In fact, when a message is missed in a chain, all the following messages 
were rejected until the new passage of the missing message. The execution of a 
chain was in this way dependent upon the continuous r e c ei ving reception of 
elements of the chain, each element missing leading to the rejection of hav i ng as a 

25 cons e qu e nc e to r e j e ct all th e i nd e x messages having an higher index than the 
missing message. 

According to an embodiment of the invention, the subscriber module, besides 
sending the messages to the security module, includes a memory to memorise them 
as soon as they arrive. 



30 Therefore, it is possible that the absence of a message containing a condition on a 
preceding message leads to reject all the following messages. When this att e nd e d 



-5- 



awaited message arrives, it is of course processed authorising the processing of 
other messages. It is possible on tho otho r otherwise -haftd that a long gr e at dea l of 
time elapsesd before these missing messages are present in the transmission with 
the risk that some are rejected, for example due to the bad quality of the connection 
5 between the managing centre and the subscriber module. 

To minimize the number of repeated messages necessary for the completion of the 
chain i s fina l ly carriod out i n i ts e nt i rety , the security module can accede to the 
memory located s i tuat e d in the subscriber module since b e caus e it contains all the 
messages in their arrival order. Thus, as soon as th e arr i val of the missing message 
10 arrives and its processing completed has b ee n accomp li sh e d , the security module 
asks the reading of the memory to process all the messages which have been 
rejected because of the condition on the missing message. 

An important aspect of the invention lies in presenting each message to the security 
module tog e th e r while storing it w ith the storag e in memory in the subscriber module. 

15 This principle can include exceptions when some messages are not destined to the 
security module but only to the module of the subscriber. Thus, even if some 
messages are rejected by the security module as the conditions are not fulfilled, this 
system knows that this message is contained in the memory of the subscriber 
module and can, when the condition is fulfilled, accede to this memory to proceed 

20 carry out these messages instead of awaiting a next passage of following messages. 

In an embodiment, the memory of the subscriber module is organised as a stack with 
entry in series, each new entry causing the displacement of previous entry (first-in 
first-out) . 

The reading by the security module can be realised in different ways. It can ask the 
25 transmission of an exact address of the memory. Nevertheless, an important aspect 
of the security in this kind of application lies in the confidentiality of the organisation 
of the data. For this reason, instead asking the transmission of a specific address, 
the security module asks the subscriber module to submit all or part of messages 
contained in its memory. It is the task A l oad i ng of the security module r e ma i ns to 
30 sort out between the messages already carried out and the messages to carry out. 

Brief description of the drawings 
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The invention will be better understood based on the following detailed description 
which refers to annexed drawings which are given by way of a non limitative 
example, wherein: 

Figure 1 represents a message sent according to such as that oont i n the 
5 systems of the prior art; 

Figure 2 represents a message sent according such as th a t s e nt accord i ng to 
the invention; 

Figure 3 represents a n e xamp le one embodiment for — ef-updating the 
temporary memory of the subscriber module. 

10 Detailed description of the invention 

In Figure 1 the different blocks of a message which take part in the function of 
chaining are represented schematically. We find a first head i ng header block HD, 
which describes the kind of message, and contains the information that this message 
is part of a chain. To form the chain, a second family block FM indicates to which 

15 family this message belongs. In fact, it is possible that several chains are transmitted 
simultaneously and in this case the identification of the family is necessary. Now that 
the family is defined, the subsequent block Fl is used to identify each element of the 
family and its place in the chain. So, with these two data, each element of the family 
can be placed at the right place in the chain again e nd to e nd with th e oth e r ele m e nts 

20 of th e sam e fam il y if n e c e ssary . It is known to indicate in one or the other of control 
blocks Fl or FM the maximum number of the element of the family. This function can 
equally be obtained by a particular marking of the last element of the family. 

In the example of figure 2, in the message of Figure 1, showing starting the two 
blocks FM and Fl, one add se e s adjo i n i ng a supplementary block CD which 

25 determines a condition to carry out this message. According to a first embodiment of 
the invention, this block is constituted by a bit which indicates if the previous 
message should or should not have been be-executed. If this condition is requested, 
the interpreter in charge of the operations on the database, will verify if the previous 
message has been executed properly and in the positive event, will execute this new 

30 message. 
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In another embodiment, this conditional block CD is constituted by a field r e a li s e d 
comprising w tth-oroups. a group for each element of the chain. Each group contains 
a condition on an element of the chain and can have several meanings, for example 
the condition "must have been executed", "can be executed" or "must not be 
5 executed". The latter condition generally is the complement of corr e sponds to the 
first. 

We take the example of a chain of 6 elements, the element 3 should forc e d l y 
imperatively be carried out before element 5. In this case, one can specify in 
message 3 that it should not be carried out if message 5 has b ee n don e was not 
10 processed . This condition can lead to a locking if one does not specify the inverted 
condition in message 5. In this case, message 5 will contain the condition "must be 
executed", in reference to the on-messaae 3 in order that if message 5 arrived before 
3, it will be not processed. 

In Figure 3, an implementation of the memory M of the subscriber module and the 

15 connection with the security module are represented. The incoming flux is firstly 
filtered by a module SEL, which has the s cop e task t o separate the managing 
messages e^from other data. These messages are then transmitted to the selection 
module SW which has the scope task to send them to different modules that is to 
sav-i.e. the security module SM, to the processing centre CTR of the subscriber 

20 module STB and to the memory M of the subscriber module. The plac i ng storage in 
memory of these messages causes the increment of the input message pointer 
i ncr e asing of th e numb e r of i ncom i ng m o ss a g o s so that no message will be lost, the 
oldest message being then eliminated from the memory. In the same way, these 
messages are transmitted to the security module, represented here as an int elli g e nt 

25 smart card SM. This card SM contains a first memory managing module GM and a 
control interpreter INT for managing the controls of the database BD. This memory 
manager GM can dialogue with the processing centre CTR by the connection I/O 
and by this means, to influence the connections in the selection module SW. The 
dotted line represented in Figure 3 represents the subscriber module STB. All the 

30 managing messages addressed to the security module SM are directed by the 
selector SW to the security module, in particular to the memory managemefrtr of 
m e mory GM, then are transmitted to the control interpreter if the carrying 
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ou tprocessing conditions are fulfilled. The memory manager GM updates the table of 
messages carri e d out processes to make the necessary comparisons at the moment 
of the arrival of a new message. The connection with the i nt e ll i g e nt smart card SM is 
of in/out type and in this way information and controls can be sent te-at_destination of 
5 the subscriber module, this connection being_represented by the line I/O. As 
explained previously, the memory M is physically in the subscriber unit STB. This is 
why the card SM can, by the intermediate of the line I/O, ask the availability of a 
memory section so as to be able to store the messages of a chain. In our example, 
the maximum number of elements in a chain does not exceed 16. So, at the arrival 
10 of the first element of the chain, the card SM, by the line I/O, requests the 
reservation of at least 16 memory places. If, during the transmission of this first 
chain, another chain is announced, the card will ask the reservation of 16 new places 
in order to ass ur e ensure the storage of a maximum number of the chain according 
to the receiving conditions. 

15 In order to read the data contained in the memory M, for example the position M3, 
the card SM can order, through the selec tion module o^SW, the address multiplexer 
AMUX to return the content of this memory position. In order to forward these data 
towards the card, a data multiplexer DMUX has the function to read the memory 
position required and to transfer it towards the card. These different transfers are 

20 directed by the s ele ctor selection module SW. 

When the carrying out processing of the chain has been interrupted by th e l ack of due 
to a interference on a message for example, the other messages continue to be 
stored in the memory of the subscriber module. When the missing message is 
retransmitted by the managing centre, it is executed properly and the memory 
25 manager GM recalls all the other messages of the chain acceding the memory of the 
subscriber module. In this case, the entry of the i nt el l i g e nt smart card SM is not 
made any longer on the arrival of messages but on the contents of the memory M. 
This access to memory M can be made in direct access specifying a memory 
address, or by sequential access reading the messages in their arrival order. 

30 In an embodiment, the memory M is organized as a memory buffer of a fixed length 
according to the availability of the free memory of the subscriber module. This 
memory includes an e ntry numb e r input pointer increased on each message 
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introduced in the memory, and an output pointer e x i t numb e r increased on each 
reading by the memory manager GM. 

The d i a l ogu e communication possibility between the card SM and the subscriber 
module STB, in particular the centre CTR, authorises more complex functions. One 
5 ef-problems frequently met at the moment of the e xchang e replacement of one or the 
other of the elements of the system, either both-the card or the subscriber module, is 
to assur e ensure the compatibility of functions with the material of previous 
generations. For this, it is interesting to allow d i a l ogu e communication between the 
different elements in order to establish the functions available in each of them; this is 

10 the scop e task of the line I/O which allows to send instructions of the card to the 
subscriber module. These instructions can, for example, ask the subscriber module 
to communicate its audio, video or data functions, the generation of the module or 
the software version. To answer to this request, the module STB disposes of means 
to compose a managing message and to transmit it, in the memory M for further 

15 reading by the card, or directly to the card, such as represented in Figure 3. 

According to another embodiment of the invention, the module STB disposes of a 
connection by modem with the managing centre. In this case, the announcement of 
resources can be made by the module STB to the managing centre through the 
modem, on request of the security module SM. 

20 As indicated in Figure 3, the module STB receives in the same way the managing 
messages coming from the managing centre. The messages arriving to the 
processing centre CTR can contain a configuration request instruction. The response 
can be made by the modem or be transmitted to the card SM. Some of these 
managing messages are only destined to the module STB and the processing centre 

25 CTR, responsible to the management of the module STB, will not transmit them to 
the security module SM or to the memory M. 
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CLAIMS 

1. Method of transmission of chain of database managing messages between a 
management centre and a plurality of subscriber databases, each management 
message member of this chain comprising a chain header-fHS), a chain identifier 
{FA4)-allowing the simultaneous transmission of several chains and a chain index (R) 
allowing to identify the message in the chain, charact e r i z e d i n that w herein this 
method comprises the step of i t consists i n adding to each message a conditional 
block (GO)-which determines if this current message is to be processed without 
references to all or part of other messages member ele m e nts of the chain , and in the 
negative event, this conditional block comprises or to be proc e ss e d accord i ng to th e 
conditions linked to the previous processing of all or part of other messages member 
el e m e nts of the chain. 

2. Method of transmission according to claim 1 , charact e ris e d i n that wherein -the 
conditional block comprises for at least one message of the chain if this message I t 
cons i sts i n d e t e rm i n i ng according to th e cond i t i ona l b l ock (CD) if a ll or part of 
e l e m e nts of th e chain can, or must, or must not have been processed first. 

3. Method of transmission according to claim 1 or 2, wherein charact e riz e d i n 
that -it comprises the step of i t cons i sts i n managing a table to th e h e art of j njhe 
subscriber database containing a p ie c e of an information representing the 
processing state of each member ele m e nt of the chain, and to update said table 
every time that a member n ele m e nt of the chain is processed, and to resettart said 
table either on request of the managing centre, or after a predefined time. 

4. Method of transmission according to claim 1 , charact e ris e d in that w herein 
the subscriber database is tiRked -connected to a subscriber unit and in that it 
comprises the step of cons i sts i n memorising the management messages in a 
memory of the subscriber unit and to present them on request to the subscriber 
database. 

5. Method of transmission according to claim 4, charact e r ise d in tha tw herein it 
comprises the step of i t consists i n memorising in series the incoming messages, 
each incoming message causing the increasmge of a stack pointer of incoming 



messages, and to allow a direct access of the messages asked -reguested bv fr om 
the subscriber database. 

6. Method of transmission according to claim 4, ch a ract e ris e d i n that wherein the 
memory in the i t cons i sts i n us i ng th e m e mory of th e subscriber unit is configured 
working as a serial memory buffer having ifha fixed length. 

7. Method of transmission according to claim 4 , char a ct e r i s e d i n th a t wherein it 
comprises the step of it consists i n receiving in the subscriber database, a message 
member e l e m e nt of a chain, and to allocate in the subscriber unit, the memory 
necessary for receiving all the member ele m e nts of thise chain. 

8. Method of transmission according to claim 4, charact e ris e d in that i t wherein it 
comprises the step of reguestinq cons i sts, on r e qu e st, to al l ow the composition by 
the subscriber module of a managing message describing its software and hardware 
resources and in sending said message, either to the subscriber database d a tab ase 
(SM), or to the management centre. 

9. Method of transmission according to claim 8, charact o r i s e d i n tha t wherein this 
request is transmitted, either by the management centre under the form of a 
management message, or by the subscriber database (SM) under the form of an 
instruction by the I/O line. 

10. Transmission system of chain of managing database messages , this system 
comprising a management centre and a plurality of subscriber's unit, each unit 
comprising a subscriber database located in a security module , each message 
member of the chain comprising a header-(HO), a chain identifier (FM)-allowing the 
simultaneous transmission of several chains, and a chain index (R)-allowing to 
identify the message in the chain, charact e r i s e d i n th a t wherein it includes a 
conditional block (GO)-which determines if the message has to be processed without 
reference to all or part of the other messages member e l e m e nts of the chain, and in 
the negative event, this conditional block comprises or to b e proc e ssed according to 
conditions linked to the previous processing of all or part of messages member 
ele m e nts of the chain. 
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11. Transmission system of chain of messages according to claim 10, 
charact e r i s e d i n tha t wherein - the conditional block (GP^ -and in the negative event 
this conditional block comprises contains a condition determining if all or part of the 
messages member o l omonts o f the chain can, or must, or must not have been 
processed first. 

12. Transmission system of chain of messages according to claims 10 and 11, 
wherein characterised i n that the security module (SA4)-includes a message manager 
{GMfable to store in a memory the state of the processing of each message of the 
chain, and that it includes comparison means of this state with the conditions 
mentioned in the conditional block (CD) o f the message in process i ng currentlv 
processed . 

13. Transmission system of chain of messages according to claim 10, 
charact e r i sed i n tha t wherein the subscriber unit includes a memory (M)-of messages, 
each incoming message causing the displacement of a input pointer th e pr e v i ous 
message in the memory-(A4), and in that the security module (SMfincludes means to 
read and process these messages. 

14. Transmission system of chain of messages according to claim 120, 
charactor i sed i n that w herein the subscriber unit {STB)-includes a connection line 
(l/G)-towards the security module (SM)-and that-it includes means to determine the 
size of the memory (A4}-according to the instructions received from the security 
module-{SM), and to means to a ^swef -reply to the security module with the a bout 
the-composition of a nd th e s e nd i ng of a managing message to th e s e cur i ty modu le 

15. Transmission system of chain of messages according to claim 102, 
charact e r i sed i n that w herein the subscriber unit {STB)-includes a selection module 
(SW) allowing to connect the separator of management messages-{SEL}, the 
processing centr ecenter (CTR) of the subscriber module, the security module (SM) 
and the memory-{M}, and means to r e cogn i s e recognize the management messages 
destined only to the processing c e ntr e center (CTR), and s w i tch i ng forwarding by the 
selection module (SW) these messages only towards the processing c e ntr e center 
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ABSTRACT 

This invention consists in a process and in a transmission system of chain of 
database updating messages between a managing centre and a plurality of 
subscriber databases geographically shared. Each message includes a chain 
identifier (FM) and a chain index (Fl) allowing te-the identi fcation of v the message in 
the chain. If a message is not received following an interference in the connection, 
the processing of fo ll ow i ng further messages can cause the locking of databases. In 
order to avoid this drawback, the solution consists in adding to each message a 
condition block (CD) which determines if this message has to be processed without 
reference to elements of the chain or which are the conditions linked to the previous 
processing of elements of the chain. 
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